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In the Claims 

1 . (currently amended) A method of re-authenticating and protecting 
wireless communication security comprising the steps of: 

a) performing a secondary authentication protocol between a wireless 
client electronic system (client) and a wireless network access point 
electronic system (AP) using a key lease generated by performance of a 
primary authentication protocol, wherein said key lease includes a key lease 
period for indicating a length of time in which said key lease is valid for 
using said secondary authentication protocol instead of said primary 
authentication protocol , and wherein the secondary authentication protocol 
includes the steps of: 

a(i) transmitting said key lease from said client to said AP; 

afii) generating a first random number associated with said 
client and a second random number associated with said AP, wherein 
said key lease includes an encryption key for use in said secondary 
authentication protocol; and 

a(iii) transmitting said first random number to said AP and said 
second random number to said client ; and 

b) if said secondary authentication protocol is successful, generating 
a session encryption key for encrypting communication traffic between said 
client and said AP , wherein the generating comprises: 

b(i) applying a hash function and said encryption key to said 
first random number and said second random number to determine 
said session encryption key . 



2. (cancelled) 
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3. (cancelled) 

4. (currently amended) A method as recited in Claim 3 claim 1 wherein said 
step b) includes: 

applying hash function is a HMAC-MD5 algorithm and wherein said 
hash function and encryption key are applied to en a concatenation of said 
first random number and said second random number to determine said 
session encryption key. 

5. (currently amended) A method as recited in Claim 3 claim 1 wherein said 
step b) includes: 

applying hash function is a HMAC-SHA-1 algorithm and wherein 
said hash function and encryption key are applied to en a concatenation of 
said first random number and said second random number to determine said 
session encryption key. 

6. (currently amended) A method as recited in Claim 2 claim 1 wherein said 
step b) includes: 

generating a first session encryption key for encrypting 
communication traffic from said client to said AP; and 

generating a second session encryption key for encrypting 
communication traffic from said AP to said client. 

7. (currently amended) A method as recited in Claim 6 wherein said step b) 
includes: 
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using said encryption key, said first random number, said second 
random number, a first media access control (MAC) address associated with 
said client, a second media access control (MAC) address associated with 
said AP, and a and the hash function to determine said first and second 
session encryption keys. 

8. (currently amended) A method as recited in Claim 7 wherein said step b) 
includes: 

applying hash function is a HMAC-MDS algorithm and wherein said 
hash function and said encryption key are applied to en a concatenation of 
said first random number, said second random number, said first media 
access control (MAC) address associated with said client, and said second 
media access control (MAC) address associated with said AP to determine 
said first session encryption key. 

9. (currently amended) A method as recited in Claim 7 wherein said st e p b) 
includ e s: 

applying hash function is a HMAC-SHA-1 algorithm and wherein 
said hash function and said encryption key are applied to en a concatenation 
of said first random number, said second random number, said first media 
access control (MAC) address associated with said client, and said second 
media access control (MAC) address associated with said AP to determine 
said first session encryption key. 

10. (currently amended) A method as recited in Claim 7 wherein said s tep b) 
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applying said hash function is a HMAC-MD5 algorithm and said hash 
function and said encryption key are applied to en a concatenation of said 
first random number, said second random number, said second media access 
control (MAC) address associated with said AP, and said first media access 
control (MAC) address associated with said client to determine said second 
session encryption key. 

1 1 . (currently amended) A method as recited in Claim 7 wherein said st e p b) 
includes: 

applying hash function is a HMAC-SHA-1 algorithm and said hash 
function and said encryption key are applied to en a concatenation of said 
first random number, said second random number, said second media access 
control (MAC) address associated with said AP, and said first media access 
control (MAC) address associated with said client to determine said second 
session encryption key. 

12. -72. (cancelled) 
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